-Do they have groups in DUO?
if no, Check Skyward to ensure active employment
if yes, (they have active employment), Go to IAM and apply entitlements. In AG manager, apply role model for user.
-go to auburn-dc-01 in RDP and run elevated powershell
run
C:\Users\supertgifford\Desktop\iamveryimpatient.ps1
go to Azure, lookup user, ensure groups have been applied.
if yes, sync user in DUO
if no, re-run powershell script and recheck.